name: authorizations
examples: >-
  See macOS authorizations that have been modified since their creation. Useful
  for threat hunting.

  ```

  SELECT * FROM authorizations WHERE created!=modified;

  ```